---
title: How to Configure Azure AD SSO for VIP Software
description: This guide walks you through setting up Single Sign-On (SSO) using Azure Active Directory (Azure AD) for VIP Software’s BAP and Invision platforms. It applies to both Staging and Production environments.
---

[Skip to content](https://knowledge.vipsoftware.com/how-to-configure-azure-ad-sso-for-vip-software#main-content)

[More support](https://knowledge.vipsoftware.com/kb-tickets/new?hsLang=en)

![](https://knowledge.vipsoftware.com/hs-fs/hubfs/rate%20iq%20(1)%20-%20June%2019%2c%202026%20at%2011.43.46-8-Artboard%208%20(1).png?width=500&height=500&name=rate%20iq%20(1)%20-%20June%2019%2c%202026%20at%2011.43.46-8-Artboard%208%20(1).png)

- [Knowledge Base](https://knowledge.vipsoftware.com/)
- [Support](https://knowledge.vipsoftware.com/tickets)

Open main navigation

Close main navigation

- [Knowledge Base](https://knowledge.vipsoftware.com/)
- [Support](https://knowledge.vipsoftware.com/tickets)
- [More support](https://knowledge.vipsoftware.com/kb-tickets/new)

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Help Center](https://knowledge.vipsoftware.com/?hsLang=en)
2. [General Application Information](https://knowledge.vipsoftware.com/general-application-information?hsLang=en)

# How to Configure Azure AD SSO for VIP Software

This guide walks you through setting up Single Sign-On (SSO) using Azure Active Directory (Azure AD) for VIP Software’s BAP and Invision platforms. It applies to both **Staging** and **Production** environments.

 

### **Step 1: Prerequisites**

Before you begin:

- Ensure you’ve created an **Enterprise Application** in Azure AD.
- Select **SAML** as the sign-on method.

 

### **Step 2: Configure Basic SAML Settings**

Navigate to:  
**Azure AD → Enterprise Applications → Single sign-on → SAML**

Use the appropriate URLs based on your environment:

#### **Staging**

- BAP: `https://www.stagingnew.vipbap.com/Default.aspx`
- Invision: `https://www.staging.vipinvision.com/Default.aspx`

#### **Production**

- BAP: `https://www.vipbap.com/Default.aspx`
- Invision: `https://www.vipinvision.com/Default.aspx`

**Example Configuration for Staging BAP:**

| Field | Value |
| --- | --- |
| Identifier (Entity ID) | \| https://stagingnew.vipbap.com/Default.aspx |
| Reply URL (ACS URL) | \| https://stagingnew.vipbap.com/Default.aspx |
| Sign-on URL | \| https://www.stagingnew.vipbap.com/Default.aspx |
| Relay State (Optional) | \| Leave blank |
| Logout URL (Optional) | \| Leave blank |

**Notes:**

- URLs are **case-sensitive** and must use **HTTPS**.
- Do **not mix** staging and production URLs.

 

### **Step 3: Configure Attributes & Claims**

Add the following claims:

| Attribute | Value |
| --- | --- |
| Firstname | \|`user.givenname` |
| Lastname | \| `user.surname` |
| Email | \| `user.mail` |
| Unique User Identifier | \| `user.mail` |

> These claims must match exactly. The Unique User Identifier should be unique per user (typically their email).

**Example of setting up the Email attribute:**

![](https://vipsoftware.zendesk.com/hc/article_attachments/40579968772877)

 

### **Step 4: Upload SAML Signing Certificate**

1. In the **SAML Certificates** section, download either: 
     - Federation Metadata XML, or
     - Base64 Certificate
2. Send the certificate file to your VIP Software contact for integration.

 

### **Step 5: Assign Users**

1. Go to the **Users and groups** tab in the Azure AD Enterprise Application.
2. Assign users or groups who need access.
3. Ensure each user has a valid email that matches their VIP account.

 

### **Step 6: Test the SSO Connection**

After setup and certificate validation:

1. Request your **company-specific login URL** from VIP Software.  
   Example:  
   `https://www.vipbap.com/Default.aspx?CompanyId=AbCdEf1234567890GhIjKl==`
2. Open the URL in a browser while signed into Azure AD.
3. If configured correctly, you’ll be authenticated and redirected into VIP.
4. If login fails, verify: 
     - Correct environment URL was used
     - Claims match the configuration
     - SAML certificate is valid
     - User/group is assigned to the application

 

### **Step 7: Support Contact**

If you encounter issues, contact:

**VIP Software Support**  
📧 Email: support@vipsoftware.com

Include:

- Screenshot of your SAML Configuration
- Error message or correlation ID
- Company-specific login URL
- SAML trace (if available)

- [Support FAQ](https://knowledge.vipsoftware.com/support-faq?hsLang=en)
- [General Application Information](https://knowledge.vipsoftware.com/general-application-information?hsLang=en)
- [BAP](https://knowledge.vipsoftware.com/bap?hsLang=en)
- [Invision](https://knowledge.vipsoftware.com/invision?hsLang=en)
- [Integrations](https://knowledge.vipsoftware.com/integrations?hsLang=en)

- [Knowledge Base](https://knowledge.vipsoftware.com/)
- [Support](https://knowledge.vipsoftware.com/tickets)

[![](https://knowledge.vipsoftware.com/hs-fs/hubfs/rate%20iq%20(1)%20-%20June%2019%2c%202026%20at%2011.43.46-8-Artboard%208%20(1).png?width=500&height=500&name=rate%20iq%20(1)%20-%20June%2019%2c%202026%20at%2011.43.46-8-Artboard%208%20(1).png)](http://vipsoftware.com)

<https://www.facebook.com/> <https://www.twitter.com/> <https://www.instagram.com/> <https://podcasts.apple.com/> [mailto:email@email.com](mailto:email@email.com)

Copyright © 2026, vipsoftware.com